The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Nov 8, 2019 | Mar 29, 2017 |
| Amazon_linux | — | Upgrade kernel | May 11, 2017 | Mar 29, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 27, 2017 | Mar 29, 2017 |
| Debian | — | Upgrade linux | May 1, 2017 | Mar 29, 2017 |
| F5 Big Ip | — | — | May 7, 2017 | Mar 29, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 26, 2017 | Mar 29, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 27, 2017 | Mar 29, 2017 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2Upgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-build | Apr 19, 2017 | Mar 29, 2017 |
| Ubuntu | — | Upgrade linux-image-4.8.0-46-powerpc-e500mcUpgrade linux-image-3.13.0-116-powerpc-e500Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-3.2.0-126-highbankUpgrade linux-image-powerpc64-smp-lts-wilyUpgrade linux-image-4.4.0-1010-gkeUpgrade linux-image-snapdragonUpgrade linux-image-omapUpgrade linux-image-3.2.0-126-generic-paeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.8.0-46-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.2.0-126-powerpc64-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-116-powerpc64-smpUpgrade linux-image-4.4.0-72-lowlatencyUpgrade linux-image-3.13.0-116-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-omap4Upgrade linux-image-4.8.0-46-genericUpgrade linux-image-3.13.0-116-lowlatencyUpgrade linux-image-3.2.0-126-omapUpgrade linux-image-3.2.0-1504-omap4Upgrade linux-image-virtualUpgrade linux-image-4.4.0-1013-awsUpgrade linux-image-highbankUpgrade linux-image-gkeUpgrade linux-image-4.4.0-72-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-116-powerpc-smpUpgrade linux-image-3.2.0-126-genericUpgrade linux-image-4.4.0-72-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-vividUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-116-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-utopicUpgrade linux-image-4.4.0-72-powerpc-e500mcUpgrade linux-image-4.8.0-46-powerpc-smpUpgrade linux-image-4.4.0-72-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-3.2.0-126-powerpc-smpUpgrade linux-image-4.4.0-72-genericUpgrade linux-image-3.2.0-126-virtualUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-4.8.0-46-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-paeUpgrade linux-image-3.13.0-116-powerpc-e500mcUpgrade linux-image-4.4.0-1052-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.8.0-46-lowlatencyUpgrade linux-image-4.4.0-1055-snapdragonUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.8.0-1033-raspi2 | Apr 5, 2017 | Mar 29, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub